$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: AwJmSsfwWNPQv1IdaS9iWjHhnugcrVQEgHstl4RNHAw= Subject key identifier: CA:62:0B:EF:2F:D9:0C:D5:19:2C:65:38:6C:45:6C:F6:5A:5F:7F:68 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 0280 Signing time: Fri 13 Jun 2025 01:25:33 +0000 Manifest this update: Fri 13 Jun 2025 01:25:32 +0000 Manifest next update: Fri 20 Jun 2025 01:25:32 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: w+J+kiJCVkyY5U047sjrCqP99jRKvJsGu16XMePvmVc=) 2: 38564246ABFB11EFAC5AA210C4F9AE02.roa (hash: FHSOIV7hZekpaVmn1ody+B5zz/ShaD8wOFOAekPJr/Y=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: bA7L+jGDZGEL0erGUM3EYZdvPilaftv3/Gg8hdqNMPM=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jun 13 01:25:32 2025 GMT Not After : Jun 20 01:25:32 2025 GMT Subject: CN=684b7e0c-5bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:bd:3d:3c:e5:5a:14:ad:1f:99:4e:ba:50: 24:8d:af:8c:93:69:13:d7:5d:ef:b4:c4:8a:05:38: 0c:65:f0:04:c9:91:44:c9:15:3b:56:40:4a:da:94: 38:31:2f:63:49:e0:3d:df:32:27:11:e7:39:61:aa: 59:1f:4a:20:60:45:1e:0a:f4:40:2d:11:4f:04:08: b7:0d:7b:8b:63:ad:8e:65:e2:ca:61:5b:1b:b2:cf: 9b:09:cd:58:bb:0a:19:11:23:8a:0c:5d:4c:d4:11: 37:65:ef:b8:4b:73:db:b7:cb:7f:de:8d:21:3a:0a: 6d:a7:9c:43:81:49:8c:b9:04:af:1d:a9:ed:20:7b: fc:80:3f:15:d2:10:79:f7:76:61:6b:cc:13:0e:ba: 3f:a1:c8:e0:b3:36:a9:29:73:70:23:72:3e:8e:ff: c4:97:67:3a:16:e0:b9:42:c3:f2:24:a2:b9:0a:1f: bc:78:c8:8e:4d:ec:c9:7a:0e:4a:a7:2b:0f:ed:c2: 85:8f:4a:ec:6b:4a:a7:40:d7:79:57:e0:d5:a0:dd: a3:04:31:51:67:8f:7f:4c:67:0c:44:fc:dc:93:7d: 02:05:54:81:ea:fe:cd:c3:9d:e1:3f:6b:29:2a:6c: bd:4d:64:58:48:96:fd:56:2e:ed:27:6b:1c:b2:88: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:62:0B:EF:2F:D9:0C:D5:19:2C:65:38:6C:45:6C:F6:5A:5F:7F:68 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c7:6a:04:af:b0:ec:ce:7e:23:3e:61:42:29:4c:3d:d2:59: 09:ea:0b:0a:e8:04:c6:b4:ff:b7:76:7d:ad:cc:4e:73:e4:04: f6:81:77:6f:22:cc:c6:ca:8b:07:ea:0f:55:d2:b8:18:fe:3f: 5e:33:08:d6:25:23:5b:7f:ac:9d:00:b3:b5:81:bb:47:45:2e: 28:44:4f:c9:e4:e1:ac:69:19:00:39:36:7c:6a:5f:64:43:2e: 59:f9:72:ed:d7:6a:8d:e7:cb:93:0a:62:b0:fb:22:50:55:75: 23:8b:cc:01:a7:a4:d7:cc:dc:f5:bf:10:39:23:e2:b1:4c:09: 9e:97:a3:0d:db:77:2b:11:80:f0:3b:80:74:42:a5:90:52:9d: cc:f3:ee:4f:38:9a:50:4c:81:f7:93:7d:78:e5:27:81:a5:ce: 0c:fb:40:52:97:94:85:ee:e0:a1:f2:e4:46:94:04:34:bd:34: 78:05:6a:31:2c:0e:1a:e3:b7:0c:94:77:93:62:ae:37:00:8f: b2:5d:92:dc:a7:ef:ad:07:e1:7e:41:05:f3:0b:ba:90:18:37: 35:80:10:bb:f6:ed:48:58:67:da:ec:f6:8f:d8:8b:aa:61:75: 00:ac:51:b2:b8:47:36:bd:c3:28:0b:19:7a:b0:51:31:bf:62: 12:b5:a5:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNjEzMDEyNTMyWhcNMjUwNjIwMDEyNTMyWjAYMRYwFAYD VQQDEw02ODRiN2UwYy01YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqm9PTzlWhStH5lOulAkja+Mk2kT113vtMSKBTgMZfAEyZFEyRU7VkBK2pQ4 MS9jSeA93zInEec5YapZH0ogYEUeCvRALRFPBAi3DXuLY62OZeLKYVsbss+bCc1Y uwoZESOKDF1M1BE3Ze+4S3Pbt8t/3o0hOgptp5xDgUmMuQSvHantIHv8gD8V0hB5 93Zha8wTDro/ocjgszapKXNwI3I+jv/El2c6FuC5QsPyJKK5Ch+8eMiOTezJeg5K pysP7cKFj0rsa0qnQNd5V+DVoN2jBDFRZ49/TGcMRPzck30CBVSB6v7Nw53hP2sp Kmy9TWRYSJb9Vi7tJ2scsohsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpiC+8v 2QzVGSxlOGxFbPZaX39oMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUx2oEr7Dszn4jPmFCKUw90lkJ6gsK6ATGtP+3dn2tzE5z5AT2gXdv IszGyosH6g9V0rgY/j9eMwjWJSNbf6ydALO1gbtHRS4oRE/J5OGsaRkAOTZ8al9k Qy5Z+XLt12qN58uTCmKw+yJQVXUji8wBp6TXzNz1vxA5I+KxTAmel6MN23crEYDw O4B0QqWQUp3M8+5POJpQTIH3k3145SeBpc4M+0BSl5SF7uCh8uRGlAQ0vTR4BWox LA4a47cMlHeTYq43AI+yXZLcp++tB+F+QQXzC7qQGDc1gBC79u1IWGfa7PaP2Iuq YXUArFGyuEc2vcMoCxl6sFExv2IStaWh -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:39 2025 by rpki-client